8k8.com Privacy Policy

This Privacy Policy applies to all personal data processed by 8k8.com in connection with the operation of the online casino and sports betting platform accessible through the 8k8.com website and mobile-optimized interface (collectively, the "Platform").

This policy applies to all registered players, prospective players who have initiated registration, visitors to the 8k8.com website, and any other individual whose personal data is processed by 8k8.com in the course of its operations. It covers personal data collected through the Platform, through customer support interactions, through marketing communications, and through automated technical means such as cookies and device fingerprinting.

This policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (DPA), and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC). 8k8.com is committed to processing personal data in accordance with the principles of transparency, legitimate purpose, and proportionality mandated by the DPA.

The terms "personal data," "sensitive personal information," "data subject," "data controller," and "data processor" used in this policy carry the meanings ascribed to them in the DPA and its IRR.

For the purposes of this Privacy Policy and the DPA, 8k8.com acts as the Data Controller in respect of the personal data of players and users of the Platform. As Data Controller, 8k8.com determines the purposes and means of processing your personal data, and is responsible for ensuring that processing is carried out in compliance with applicable data privacy law.

Where 8k8.com engages third-party service providers — including game providers, payment processors, KYC verification services, and cloud infrastructure providers — to process personal data on its behalf, those providers act as Data Processors under written data processing agreements that require them to process data only on 8k8.com's documented instructions and to implement appropriate technical and organizational security measures.

8k8.com has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and applicable data privacy regulations. The DPO's contact details are provided in Section 15 of this policy.

8k8.com collects personal data that is necessary to operate the Platform, comply with legal obligations, and deliver the services you have requested. The categories of data we collect include:

Identity and Contact Data

Collected at registration and used for account management, identity verification, and communication. Date of birth is used to verify that you meet the minimum age requirement of 21 years.

Identity Verification (KYC) Data

Collected when required for withdrawal processing or triggered by anti-money laundering risk thresholds. KYC data constitutes sensitive personal information under the DPA and is processed under strict access controls.

Financial and Transaction Data

8k8.com does not store raw card numbers or full GCash credentials. Financial data is processed by PCI-DSS compliant payment processors. 8k8.com retains transaction references, amounts, timestamps, and payment method types for accounting, compliance, and dispute resolution purposes.

Gaming and Behavioral Data

Used for account management, responsible gaming monitoring, bonus calculation, VIP program tier assessment, and regulatory reporting obligations.

Technical and Device Data

Collected automatically through technical means. Used for fraud detection, security monitoring, geographic eligibility checks, and Platform performance optimization.

8k8.com collects personal data through the following means:

• Directly from you — information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions;
• Automatically through the Platform — technical data collected via server logs, cookies, web beacons, and session tracking technologies as you navigate and use the 8k8.com website;
• From third-party payment providers — transaction confirmation data, payment status updates, and payment method verification information received from GCash, Maya, BPI, BDO, Metrobank, GrabPay, and other payment processors;
• From identity verification providers — results of automated document verification and liveness checks performed by accredited KYC service providers when you submit identity documents;
• From fraud prevention and AML screening services — risk scores, politically exposed person (PEP) screening results, and sanctions list check outcomes received from third-party compliance data providers.

8k8.com processes your personal data for the following purposes, each of which is supported by a legal basis described in Section 6:

Under the Data Privacy Act of 2012, 8k8.com relies on the following legal bases for processing personal data:

• Contract Performance: Processing is necessary to perform the contract between 8k8.com and the player — specifically, to deliver the services you have registered for, including game access, payment processing, and account management.
• Legal Obligation: Processing is required by law — including age verification obligations under PAGCOR regulations, AML reporting obligations under Republic Act No. 9160 (Anti-Money Laundering Act), and data subject rights obligations under the DPA.
• Legitimate Interest: Processing is necessary for 8k8.com's legitimate interests in operating a secure, fraud-free platform, where those interests are not overridden by the data subject's rights and interests. This includes fraud detection, security monitoring, and responsible gaming analytics.
• Consent: Where processing is not covered by the above bases — primarily for direct marketing communications — 8k8.com will seek your explicit, informed consent before processing. You may withdraw consent at any time by contacting support or updating your communication preferences in Account Settings.

8k8.com does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the circumstances described below:

Service Providers (Data Processors)

8k8.com shares personal data with third-party service providers acting as data processors under written agreements. Categories of processors include:

• Payment processors (GCash, Maya, BPI, BDO, Metrobank, GrabPay, and cryptocurrency processors) for the purpose of facilitating deposits and withdrawals;
• KYC and identity verification providers for the purpose of document verification, liveness checks, and age verification;
• Cloud infrastructure and hosting providers for the purpose of storing platform data and maintaining service availability;
• Game software providers who receive anonymized session data necessary to deliver game services and calculate outcomes;
• AML compliance screening services for the purpose of sanctions checks and politically exposed person (PEP) screening;
• Customer relationship management (CRM) and support platform providers for the purpose of managing and responding to player inquiries.

Regulatory Authorities

8k8.com discloses personal data to PAGCOR and other Philippine regulatory authorities where required by law or in response to a lawful request. This includes mandatory reporting of suspicious transaction reports (STRs) under the Anti-Money Laundering Act.

Law Enforcement

8k8.com discloses personal data to law enforcement agencies, courts, or other public authorities where required by a lawful order, court order, or applicable Philippine law. 8k8.com will endeavour to notify affected players of such disclosures where permitted by law to do so.

8k8.com retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, 8k8.com will securely delete or irreversibly anonymize personal data in accordance with the procedures set out in its internal data retention and disposal policy.

8k8.com implements technical and organizational security measures appropriate to the risk level of the personal data processed on the Platform. These measures include:

• Encryption in transit: All data transmitted between your device and 8k8.com is encrypted using Transport Layer Security (TLS) 1.3, which is the current industry standard for web encryption;
• Encryption at rest: Sensitive data stored in 8k8.com's systems — including KYC documents and financial records — is encrypted at rest using AES-256 or equivalent;
• Password security: Account passwords are hashed using industry-standard one-way hashing algorithms (bcrypt or equivalent). 8k8.com staff cannot view your password in plain text;
• Access controls: Access to personal data within 8k8.com's systems is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and security training;
• Two-factor authentication: 8k8.com offers two-factor authentication (2FA) for all player accounts, providing an additional layer of protection against unauthorized account access;
• Penetration testing and security audits: 8k8.com's Platform undergoes regular security assessments by qualified third-party security professionals;
• Data breach response: 8k8.com maintains a documented data breach response procedure. In the event of a personal data breach that is likely to harm affected individuals, 8k8.com will notify the NPC and affected data subjects within the timeframes required by the DPA.

8k8.com uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your browser when you visit the 8k8.com website. Cookies do not contain executable code and cannot carry viruses.

Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a session. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Remember your preferences — such as language selection, last visited game section, and responsible gaming settings — so you do not need to reconfigure them on each visit.
• Performance and Analytics Cookies: Collect aggregated, anonymized data about how players navigate and use the Platform. Used to identify errors, improve page performance, and understand which game sections are most used. 8k8.com uses first-party analytics only — no data is shared with external advertising analytics networks.
• Security Cookies: Used for fraud detection, bot detection, and geographic eligibility verification. These are strictly necessary for platform security.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to 8k8.com. Disabling functional or performance cookies may reduce the quality of your experience but will not prevent basic Platform access.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in respect of your personal data held by 8k8.com. These rights may be exercised by contacting the 8k8.com Data Protection Officer at the details in Section 15. We will respond to valid requests within 30 calendar days.

Individuals between 18 and 20 years of age may legally use the internet in the Philippines but are not permitted to create an account or use any gambling service on 8k8.com. The 21-year minimum age restriction is mandated by PAGCOR and is strictly enforced.

If you are a parent or guardian and believe your child has created an account on 8k8.com without your knowledge, please contact our support team or Data Protection Officer immediately. We will investigate and, where confirmed, close the account and delete associated personal data promptly.

Some of 8k8.com's third-party service providers — including cloud infrastructure providers, game providers, and KYC verification services — may process personal data in servers located outside the Philippines. Where personal data is transferred outside the Philippines, 8k8.com ensures that such transfers are made in compliance with Section 21 of the DPA, which permits cross-border transfers only where the receiving country or organization provides an adequate level of data protection.

Specifically, 8k8.com ensures cross-border transfers are covered by one or more of the following safeguards:

• An NPC-recognized adequacy determination in respect of the receiving jurisdiction;
• Binding contractual clauses in data processing agreements with receiving processors that incorporate the NPC's standard contractual clauses or equivalent protections;
• Binding corporate rules or equivalent intra-group data transfer mechanisms where the transfer is to an affiliated entity.

You may request information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting the DPO at the contact details in Section 15.

8k8.com may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The date of the most recent revision is displayed at the top of this document.

Where changes are material — meaning they significantly affect your privacy rights or the way we handle your personal data — 8k8.com will provide advance notice of at least seven (7) days via a prominent notice on the Platform and, where technically practicable, via notification to your registered Philippine mobile number or email address.

Your continued use of the 8k8.com Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated policy. If you do not agree to the changes, you may close your Account and request deletion of personal data in accordance with the procedures in Section 11 and subject to applicable retention obligations.

We recommend reviewing this policy periodically. The current version is always accessible at 8k8com.bio/privacy-policy.

To exercise your data subject rights, raise a privacy concern, or contact our Data Protection Officer, please use the following channels. All privacy-related communications are treated as confidential and directed to the DPO's queue.

When submitting a data subject rights request, please include your registered mobile number or username, a description of the right you are exercising, and sufficient information to enable 8k8.com to verify your identity. This protects against unauthorized disclosure of your personal data to third parties. 8k8.com will respond within 30 calendar days. Complex requests may require up to 60 days, in which case you will be notified of the extended timeline.